Release notes

July 2026

New APIs:

• Visa Accounts Receivable Manager: 
  • VARM Webhook Notification API: VARM Webhook Notification API
    • Customer Management: Notifications for add, update or deactivate customer
    • Invitation: Notifications for supplier invitation progress.
    • Payment: Payment notifications
    • Supplier Onboarding: Notifications for steps involved in Supplier onboarding journey
    • Availability: Restricted
• Visa Direct Portal - YellowPepper Reporting Integration: 
  • Yepex ADS Reporting: Yepex ADS Reporting
    • Get alias summary statistics: Get alias summary statistics
    • Get dropdown options for alias: Get dropdown options for alias
    • Search aliases: Search aliases
    • Availability: Restricted

Bundle Update: Existing API Sharing and New API Onboarding: 

• Visa Recurrent: 
  • Visa Recurrent - Merchant: Merchant and Acquirer APIs to create and manage recurring payment agreements
    • Confirm Recurring Order Status: This API allows the Merchant to confirm the status of the Recurring Payment Order.
      • Visibility : Restricted
      • MLE: Mandatory
      • Type: Inbound 

• Visa Recurrent - Issuer: APIs that enable issuers to provide cardholders with a comprehensive view of their recurring payments and the ability to cancel them.
  • Remove Payment Block from Recurring Order: This API removes an active payment block from a Recurring Payment Order and allows payment processing to continue for the relevant merchant.<br> The status of the Recurring Payment Order remains unchanged.
    • View Recurring Orders: This API retrieves the list of Recurring payment orders specific to the search criteria.
    • Update Recurring Order Status: This API is used to update the status of a Recurring Payment Order.
    • Availability: Restricted

• Visa Subscription Manager API(Existing API): Visa Subscription Manager API bundle
  • Cancel: Cancel multiple stop instructions
    • Search Stops: Search for stop instructions by PAN
    • Add Merchant Stops: Add one or more merchant level stop instructions
    • Availability: Restricted

•  Visa Stop Payment Service API(Existing API): Visa Stop Payment Service API
  • Stopped Transactions by PAN: Allows clients to retrieve stopped transactions by PAN (via VDP) programmatically without having to use the user interface
  • Retrieve Stop: Retrieve stop instruction details by PAN and stop instruction id
  • Eligible Transactions: Retrieve all the eligible transactions that can have a stop instruction placed on for a given PAN and date range
  • Add Merchant Stops: Add one or more merchant level stop instructions
  • Linked: Find all stop instruction details linked to a given stop instruction
  • Update Mcc: Update one mcc level stop instruction
  • Update Merchant Stop: Update one merchant level stop instruction
  • Add MCC: Add one or more merchant category code level stop instructions
  • Add PAN: Add one pan level stop instruction
  • Extend: Extend the end date of multiple stop instructions
  • Search Stops: Search for stop instructions by PAN
  • Stopped Transactions by Stop ID: Allows clients to retrieve stopped transactions by ID (via VDP) programmatically without having to use the user interface
    • Cancel: Cancel multiple stop instructions
    • Availability: Restricted

New Product:

• Visa Consumer Authentication Service: Visa Consumer Authentication Service (VCAS) is a data-driven 3-D Secure (3DS)-compliant consumer authentication solution for issuers and processors that is designed to support issuer authentication strategies. 
• Availability: Public 
• APIs: 
  • VCAS-Marking-API: The Confirmed Marking API allows clients to notify VCAS when the status of a transaction has been verified. Issuers have the option to mark transactions as Good, Fraud, or Undetermined.
  • VCAS-CardStatus-API: APIs for managing Card Status information in VCAS product.

New APIs:

• Visa A2A: 
  • Visa A2A API: The API is used to establish subscriptions to receive commercial data.
    • Create Batch Domestic VRP Consent – Europe: Create Batch Domestic VRP Consent – Europe
    • Availability: Restricted
• Visa Business Data Solutions: 
  • Commercial Subscription API: The API is used to establish subscriptions to receive commercial data.
    • Create Subscription: Create service subscriptions with account inclusions
    • Update Subscription: Update service subscriptions with account inclusions
    • Availability: Restricted

New Outbound API(Documentation Only):

• Visa Direct Account and Wallet: 
  • Visa Direct Account and Wallet Receive API: The API is used to establish subscriptions to receive commercial data.
    • Payout Event Notification: This API allows Visa to notify the Originating Entity of informational events associated with a payout transaction, providing early visibility into payout activity
    • Availability: Public 

New Endpoints:

• DPS Forward Services: 
  • Profile Management: 
    • Create Profile: Use the Create Profile API to create a standalone cardholder profile. A profile created through this API is not associated with an account or card. The Create Profile API supports use cases where a cardholder profile must be established before card issuance. If profile creation and card issuance occur as part of the same process, use the Enroll a Card API to create the profile and enroll the card in a single request. Upon successful submission of profile data, DPS Forward generates and returns a profileId. The profileId is required for future interactions when enrolling a cardholder into one or more card programs using the Enroll a Card API request and with profile-related APIs.
    • Availability: Restricted

• Visa Commercial Fraud Solutions: 
  • Supplier Validation: 
    • Register-Supplier: Register a new supplier with buyer-supplier relationship details. This operation registers the relationship between a buyer and supplier, including acquirer BIN/CAID information and contact details and returns supplier details upon successful registration.
    • Update-Supplier: Update the validation status to untrusted for an existing buyer-supplier relationship.
    • Retrieve-Supplier: Retrieve the validation status for an existing supplier.
    • Availability: Public 

• Visa Cardholder Experience: 
  • VCX Payment Credential API: 
    • Retrieve payment credential with transaction context: Enable benefit providers to retrieve payment credential
    • Get Payment Credential: Enable benefit providers to retrieve payment credential
    • Availability: Restricted

• Visa Notification Service: 
  • VNS is used for sending email, sms and push notifications: 
    • VNSN Sinch Mailgun API: VNSN Sinch Mailgun API
    • Availability: Restricted

Product Name Changes:

• Visa Commercial Fraud Solutions:
  • Product name changed from Visa B2B Payment Controls to Visa Commercial Fraud Solutions
• Visa Cross-Border and FX Services:
  • Product name changed from Visa Cross Border Service to Visa Cross-Border and FX Services

June 2026

New APIs:

• Visa Direct: 
  • Visa Alias Directory API - Deprecated: These are the API specifications for Alias Directory 1.0. Visa Alias Directory Service provides services to map and resolve an identifier; referred to as an “Alias” such as mobile phone number or email address to a card Primary Account Number (PAN). The purpose of using an Alias for payment is that it is intuitive, easy to share, and avoids exposing sensitive information such as the PAN of the payee when initiating a payment. A Visa client can use Visa Alias Directory Service to allow consumers to initiate push payments using an Alias. A Visa client can provide Visa Alias Directory Service with an Alias and receive the PAN mapped to that Alias. This PAN can then be used in a push payment.
    • Alias Inquiry: The Alias Inquiry API enables clients to check if an Alias or list of Aliases is available for Alias resolution. The response will indicate the Aliases that are available for Alias resolution. Up to 1000 Aliases can be sent in the Alias Inquiry request.
      • Resolve: The Resolve API provides recipient's primary account and related data associated with the input alias. The data returned in API response is in application/json format. In the request message, clients also have the option to choose which fields to return in the response by choosing the desired fields in the query parameter. Only unnested fields can be selected. In the response message, only fields selected in the query parameter will be returned. If none of the fields in the query parameter have values in the response message, then a 404 with error code VAD-1040 Record Not Found will be returned.
      • Resolve V2: The Resolve API provides recipient's primary account and related data associated with the input alias. The data returned in API response is in application/json format. In the request message, clients also have the option to choose which fields to return in the response by choosing the desired fields in the query parameter. Only unnested fields can be selected. In the response message, only fields selected in the query parameter will be returned. If none of the fields in the query parameter have values in the response message, then a 204 will be returned.
      • Get Alias Legacy: Get the aliases and recipient's related data associated with a consumer's payment instrument
      • Update Alias Legacy: To update alias and/or recipient related data in the Alias Directory for the given guid.  For selected markets that allows one alias link to multiple PANs, issuer needs to send multiple API requests, each request with the respective guid, to update all respective alias records.
      • Delete Alias Legacy: To delete alias(es) and recipient related data including PAN from the Alias Directory.
      • Create Alias Legacy: To create alias record(s) with recipient's primary account number (PAN) and related data in the Alias Directory. This API allows issuer to link one alias to one PAN; multiple aliases to the same PAN; one alias to multiple PANs with a default PAN to receive money
        • Availability: Public

New Outbound API:

• Visa Digital Wallet Enabler: 
  • Seitc Push Notification API:
    • Notify Push Message Ready: Notify Push Message Ready
      • Availability : Restricted

New Endpoint:

• Visa Payment Passkey: 
  • Visa Payment Passkey: 
    • VPP OAuth Token: The /oauth2/token endpoint is used to issue, exchange, and refresh tokens for supported authentication flows. It enables scenarios such as device authentication, authorization code to access token or ID token exchange, ID token to access token exchange, and other supported token conversion and renewal operations. This endpoint serves as the central token-processing interface for clients that need to obtain secure tokens after authentication or exchange an existing credential for another token type.
    • Device Registration (Enrollment): Register a new device instance with authentication keys. Returns a subject_id (device identifier) along with a linkage_url.
    • Register FIDO2 Attestation: Register the Attestation Response given by the FIDO2 Authenticator to the Relying Party app after the successful creation of FIDO2 credentials.
    • Verify FIDO2 Assertion: Verify the Assertion Response given by the FIDO2 Authenticator to the Relying Party app after a successful navigator.credentials.get() operation.
      • Availability: Public

• Visa Accounts Receivable Manager: 
  • Visa AR Manager Onboarding Suite API: 
    • Supplier Payment Configuration: Configures acquiring details and establishes supplier preferences
      • Availability: Public

New Outbound Endpoint:

• Alias Directory Service: 
  • Remote Directories: 
    • Alias Confirm: Retrieve information about an Alias. This will help confirm the identity of the person associated with the alias, ensuring secure and accurate transactions.
      • Availability: Public

May 2026

New Outbound API:

• Visa Digital Enablement Lite App: 
  • Client Outbound Events
    • Post-provision a shared card: Webhook sent to the consumer with provisioned card credential and recipient token details after provisioning is complete.
    • Pre-provision a shared card: Webhook sent to the consumer with cardholder and recipient details to initiate shared card pre-provisioning.
  • Availability: Restricted

April 2026

New Outbound API:

• Visa B2B Payment Controls: 
  • Client Outbound Events
    • Push authentication request: Visa Commercial’s Virtual Card Authentication service transmits the authentication request to the Fintech, enabling them to initiate the authentication workflow with the end user through either one-time-password (OTP) verification or biometric authentication.
    • Push user-mapping response: Visa Commercial’s Virtual Card Authentication service will transmit the responses for user-mapping operations (create, read, update, and delete) for API calls in which the callback option has been enabled.
  • ACS Provider Outbound Events:
    • Push biometric result: Visa Commercial’s Virtual Card Authentication service will forward the biometric authentication result received from the Fintech to ACS provider, enabling them to continue the authentication process.
  • Availability: Public

New Inbound API:

• Visa Data Tokens: 
  • Visa Cohorts APIs: Cohorts APIs are used for fetching the segment/cohort level data . Which included fetching the cohort metadata and the actual cohort/segment data at different level
    • POST Cohort queries: Queries cohort data based on the specified type and filters. Returns paginated results with configurable limit and offset
    • GET Cohorts metadata: Retrieves metadata information for available cohort types, including their descriptions and available filters
  • Availability: Restricted

• Visa Intelligent Commerce: 
  • Visa Intelligent Commerce Agent APIs:
    • Consumer - Enroll Card: Partners can use the Enroll Card feature to register a Consumer's payment method in the VACP Platform and configure initial transaction settings. This process includes recording the Consumer's permission for enrollment, stored as assuranceData. If the consumer has also consented to the agent retrieving personalization signals during enrollment, this is recorded in the consentData field. The Enroll Card function is a backend API designed for secure server-to-server interactions.
    • Consumer - Initiate Purchase Instruction: The Initiate Purchase Instruction API enables consumers or partners to establish a transaction plan within the VACP Platform. This process records the Consumer's approval for the partner to use their Digital Card in a transaction, stored as assuranceData. It also allows for setting up consumer-defined restrictions and spending limits, also known as mandates. This API is designed for secure server-to-server communication, operating as a backend service.
    • Consumer - Update Purchase Instruction: The Update Purchase Instruction API enables consumers or partners to modify an existing transaction plan within the VACP Platform. This update process includes revising Digital Card details and adjusting consumer-defined restrictions and spending limits collectively referred to as mandates.
    • Consumer - Cancel Purchase Instruction: The Cancel Purchase Instruction API allows for the revocation of a previously established transaction plan.
    • Initiate Purchase and Get Payment Credentials: The Retrieve Payment Credentials API triggers the commencement of one or multiple transactions and retrieves the necessary payment credentials associated with the purchase(s). 
    • Partner - Publish Transaction Event Notifications: The Confirmation API enables Partners or Participants to provide status updates and/or results for Instructions, Purchases, Orders, Shipping, and Payment Events (including Purchase Cancellations or Payment Authorizations).
  • Availability: Restricted

• Visa Offers Network: 
  • Consent Service: Provides endpoints to manage user consents.
    • Create Consent: Create one or more consent records for a user. Supports multiple consent types in a single request.
    • Retrieve All Consent Status for a User: Retrieve all consent records for a specific user.
    • Retrieve a Specific Consent Status for a User: Retrieve a specific consent record for a user by consent type.
    • Delete a Specific Consent Record for a User: Delete a specific consent record for a user by consent type.
    • Remove All Consent for a User: Delete all consent records for a specific user (GDPR right to erasure).
  • Availability: Public

New Endpoint:

• Visa Direct Connect: 
  • Notification API:
    • PayoutStatusNotification(Documentation only): The purpose of the API is to Enable Visa to provide updates of an payout transaction to Originating Entity
  • Availability: Public

• Visa Offers Network: 
  • Offers Service:
    • Get and Filter Offers: Retrieves a paginated list of offers based on optional filters. Supports filtering by offer type, merchant name, and merchant category with pagination and sorting.
    • Update Offers: Updates existing merchants and offers in bulk. Allows modification of merchant details, offer details, or both. Merchants must exist before updating.
    • Delete Offer: Soft deletes a merchant and all associated offers by GOR Merchant ID (UUID). The merchant and offers are marked as inactive but remain in the system for historical tracking.
    • Get Offer by GOR Merchant ID: Retrieves a merchant and all associated offers by GOR's internal merchant ID (UUID format). Returns complete merchant details including offers, store locations, and identifiers.
  • Availability: Public

• Consumer Enrollment Service:
  • Get User Consents: Endpoint to get the consent status for a user
• Availability: Public

March 2026

New Endpoints:

• Click to Pay:
  • Secure Remote Commerce:
    • Checkout: The Checkout operation utilizes the Consumer chosen Digital Card and details of the current transaction to retrieve Payment Data and payment related data.
    • Initiate Identity Validation: The Initiate Identity Validation operation initiates a process to validate that a Consumer is in the possession of or has access to, the Consumer Identity claimed.
    • Complete Identity Validation: The Complete Identity Validation operation determines whether data, provided by the Consumer as part of a second step of an identity validation process, is valid. It can also be used to check whether an out-of-band service was successful.
    • Identity Lookup: The Identity Lookup operation uses a provided consumer identity (email address or mobile phone number) to determine whether it is associated with an SRC profile.
  • Availability: Public 

• Scan to Pay:
  • QR Transaction Status Enquiry: API to retrieve the QR transaction status
  • Availability: Restricted

• B2B Virtual Account Payment Method:  
  • Account Management service: 
    • Create offers under a Merchant: Creates or updates offers for existing merchants. The merchant must already exist in the system. This endpoint only accepts merchantId, merchantName, action, and offers fields.
    • Bulk Requisition Service: Unified endpoint for bulk virtual account operations. The action is determined by the 'action' field in the request body
  • Availability: Public

February 2026

New Outbound APIs:

• B2B Virtual Account Payment Method: 
  • Outbound Events: 
    • Payment Expired: Payment Expired
    • Requisition Details Updated: Requisition Details Updated
    • Requisition Rule Updated: Requisition Rule Updated
    • Payment Match Status Updated: Payment Match Status Updated
    • Requisition Deleted: Requisition Deleted
    • Requisition Expired: Requisition Expired
    • Payment Canceled: Payment Canceled
    • Bulk Requisition Status Updated: Bulk Requisition Status Updated
  • Availability: Restricted

New Inbound APIs:

• Visa Receiver Directed Payouts: 
  • Receiver Directed Payouts Alias Resolution 
    • Alias Resolve: This enables clients to check if an Alias or list of Aliases is available for Alias resolution
    • Alias Inquiry: This enables clients to check if an Alias or list of Aliases is available for Alias resolution
  • Receiver Directed Payouts Lifecycle Management 
    • Delete Payment Credential: Delete Payment Credential paymentcredential Id.
    • Get All Payment Credentials: Get all payment credentials by alias id.
    • Update Alias: Update Alias by Alias Id
    • Get Alias Id from Value: Get Alias Id from Alias Value
    • Get Alias: Get Alias by Alias Id
    • Delete Alias: Delete Alias by Alias Id
    • Update Payment Credential: Update Payment Credential by paymentcredential Id.
    • Get Payment Credential: Get payment credentials by paymentcredential Id.
  • Availability: Public

New Endpoints:

• Click to Pay:
  • SRC Passkey: 
    • GSPA Checkout: The Checkout operation utilises the Consumer’s chosen Digital Card and details of the current transaction to retrieve the payment related secure data. If present in the checkoutResponse attribute, the encryptedPayload or encryptedSignedPayload encrypted according to JSON Web Encryption (JWE) specification RFC 7516 and the algorithm used for encryption is according to RFC 7518, Section 4.1
  • Availability: Restricted

• Visa Offers Network: 
  • Offers Service: 
    • Create offers under a Merchant: Creates or updates offers for existing merchants. The merchant must already exist in the system. This endpoint only accepts merchantId, merchantName, action, and offers fields.
    • Update Offers for a Merchant: Updates existing offers for merchants. Use this endpoint to modify offer details, change offer status, or activate/deactivate offers.
    • Get Offers for a Specific Merchant: Retrieves all active offers associated with a specific merchant. Returns an array of offers with complete details including dates, discounts, and status.
    • Delete Offer for a Merchant: Soft deletes a specific offer by marking it as inactive. The offer record remains in the system but is no longer visible in active queries or available for customer use.
    • Create New Offers - Generic: Transforms the request payload based on client-specific mappings and forwards to /v1/offers. Requires X-GOR-CLIENT-ID header for client identification.
    • Update Offers - Generic: Transforms the request payload based on client-specific mappings and forwards to /v1/offers. Requires X-GOR-CLIENT-ID header for client identification.
  • Eligibility Service:
    • Get Segments By User ID: Returns segment details for the provided request parameters. Requires X-GOR-CLIENT-ID header for user enrollment validation.
    • Get Segments by Card ID: Returns segment details for the provided request parameters. Requires X-GOR-CLIENT-ID header for user enrollment validation.
    • Get Merchant Ranks by User ID: Returns merchantsRanks details for the provided request parameters.
    • Get Merchant Ranks by Card ID: Returns merchantsRanks details for the provided request parameters.
  • Payout Service:
    • Payout Request - Generic: Transforms the request payload based on client-specific mappings and forwards to /v1/payout. Requires X-GOR-CLIENT-ID header for client identification.
  • Ledger Service:
    • Ledger Add Event - Generic: Transforms the request payload based on client-specific mappings and forwards to /v1/event. Requires X-GOR-CLIENT-ID header for client identification.
  • Consumer Enrollment Service:
    • Consumer Enrollment Opt In - Generic: Transforms the request payload based on client-specific mappings and forwards to /v1/optIn. Requires X-GOR-CLIENT-ID header for client identification.
  • Availability: Restricted

• Visa Pilot Program Enablement: 
  • QR Wrapper Service:
    • tranEnquiry: API provides services to retrieve Payment details for CYBS Flow
  • Availability: Restricted

January 2026

New Products:

• Payment Account Tokenization: Payment Account Tokenization (PAT) is a Demand Deposit Account (DDA) tokenization solution following the same paradigm as a Token Service Provider, such as VTS. PAT substitutes a bank account number and replaces this with a surrogate value. This surrogate value is used for an RTP/ACH transaction. This enables banks to manage account payment risk exposure in several payment use cases (p2p, biller, RFP, open banking, wallets, etc.) by replacing account numbers with account tokens linked to attributes and token rules.
  • Availability: Public

• Visa Accounts Receivable Manager(Visa AR Manager): Visa Accounts Receivable Manager (Visa AR Manager) is designed to grow and maintain existing virtual card volume by automating the virtual card transaction process, addressing a significant pain point for B2B accepting merchants.
  • Availability: Public

New APIs:

• Visa Digital Wallet Enabler: 
  • TR HCE API:
    • Get Keys: This message is used by the token requestor to request the keys from the TSP.
    • Get Provisioning Data: This message is used by the token requestor to fetch the provisioning data.
  • Availability: Public

• Visa Direct Connect: 
  • Visa Direct Connect SDK: APIs for Visa Direct Connect SDK
    • Update Preferred Payment Credential: Update a payment credential as the preferred card
  • Availability: Restricted

• Visa Id & Credential:
  • Batch Solution: Placeholder API for onboarding clients to VICA Batch solution
    • Batch Enrollment and LCM Solution: Batch Enrollment and LCM Solution
  • Availability: Restricted

• Visa Pilot Program Enablement:
  • VDCM Card Services: 
    • Post Card Look Up: Post Card Look Up
  • Availability: Restricted

• Visa Processing Performance Monitor: 
  • DPS API: These APIs provide DPS transactions stats such as STIP and Declines.
    • Get Stip Statistics: Retrieve Stand-In Processing data summary
    • Get Decline Statistics: Retrieve decline data summary
  • Availability: Restricted

New Endpoints:

• Alias Directory Service:
  • Alias Resolution: 
    • Alias Confirm: Retrieve information about an Alias and the payment credential(s) associated with the Alias. This will help confirm the identity of the person associated with the alias, ensuring secure and accurate transactions.
  • Availability: Public

• Visa Pilot Program Enablement: 
  • QR Wrapper Service:
    • Enhanced Lookup: This Enhanced Lookup API is used by the wallets to get additional Merchant information by passing the scanned QR payload
    • Refund Cybersource: Refund Cybersource API end point is used to void or refund the authorized transaction based on the time limit configured for each QR Connector
    • Place Order: Place Order, hosts API end point to place the order to AliPay
  • Availability: Restricted

Product Name Change:

• Visa AR Manager:
  • Changed product name to Visa Accounts Receivable Manager